Schnorr Sigs

1. Nonce Bias & s2c
2. s2c causing leaked keys

Schnorr Multisigs

1. Rogue Key Attacks & MuSig
2. Precommit round (& Wagner's attack)
3. Nonce precomputation (& Wagner's attack)
4. Thresholds and restarts